IBM Support

OA52226: IN DATASHARING MODE, RACF STILL USES VLF PURGE OF IRRACEE FOR USER PROFILE CHANGES.

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • In RACF DataSharing Mode, a change to a security-sensitive field
    in a user profile causes RACF to delete that User's cached
    object from the VLF Class IRRACEE.  It also updates the ICB
    counts for other sharing systems to do a full VLF Purge of
    IRRACEE.
    In DataSharing Mode, the full Purge is not needed because the
    sharing systems will be receiving an XCF Message from the
    original system denoting which User's object to delete.
    
    Removing the VLF Purge will preserve the cached data for all the
    other users and save time when those users login again.  This
    time includes the arduous task of evaluating a KDFAES password
    via the CPACF feature.
    
    RACFPWENCR/K
    

Local fix

  • BYPASS/CIRCUMVENTION:
    //ZAP      EXEC PGM=IMASPZAP
    //SYSPRINT DD SYSOUT=*
    //SYSLIB   DD DSN=SYS1.LPALIB,DISP=SHR
    //SYSIN    DD *              /* for UA83174
      NAME  IRRMNGR   IRRMRD00
      VER 275E 9602,93EA
      VER 2762 5840,5150
      REP 275E 9600
    /*
    
    //SYSIN    DD *              /* for UA75269
      NAME  IRRMNGR   IRRMRD00
      VER 2756 9602,93EA
      VER 275A 5840,5150
      REP 2756 9600
    /*
    
    RECOVERY ACTION:
    Stop changing user profiles (which is hard to do as a bad
    password during a login will suffice).
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users whose installations run RACF in data   *
    *                 sharing mode, and utilize the IRRACEE VLF    *
    *                 cache.                                       *
    *                 SYSPLXDS                                     *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    Users whose installations run RACF in data
    sharing mode, and utilize the IRRACEE VLF
    cache may experience excessive purging of
    the IRRACEE VLF cache.
    

Problem conclusion

  • Users whose installations run RACF in data
    sharing mode, and utilize the IRRACEE VLF
    cache may see less purging of that cache.
    SYSPLXDS
    

Temporary fix

  • *********
    * HIPER *
    *********
    

Comments

APAR Information

  • APAR number

    OA52226

  • Reported component name

    RACF

  • Reported component ID

    5752XXH00

  • Reported release

    790

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    YesHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2017-03-07

  • Closed date

    2017-03-17

  • Last modified date

    2017-04-21

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UA91331 UA91347

Modules/Macros

  • IRRMRW00
    

Fix information

  • Fixed component name

    RACF

  • Fixed component ID

    5752XXH00

Applicable component levels

  • R7A0 PSY UA91331

       UP17/03/29 P F703 ¢

  • R790 PSY UA91347

       UP17/03/29 P F703 ¢

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"790","Edition":"","Line of Business":{"code":"","label":""}},{"Business Unit":{"code":null,"label":null},"Product":{"code":"SG19O","label":"APARs - MVS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"790","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
21 April 2017